Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/reTOma3sOMOZSbpiFTANx2NwkaQ.roa
File: reTOma3sOMOZSbpiFTANx2NwkaQ.roa (raw, json)
Hash identifier: 9uar4hHAmlw7kGowHiUCcJECjPXIzLiXYwpu7uU+0Nw=
Subject key identifier: AD:E4:CE:99:AD:EC:38:C3:99:49:BA:62:15:30:0D:C7:63:70:91:A4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2075
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/reTOma3sOMOZSbpiFTANx2NwkaQ.roa
Signing time: Fri 25 Nov 2022 04:38:45 +0000
ROA not before: Fri 25 Nov 2022 04:38:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.104.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8309 (0x2075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ADE4CE99ADEC38C39949BA6215300DC7637091A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d1:6b:6d:4c:5a:51:15:22:96:d4:be:91:54:
ac:a8:f1:f6:69:85:53:28:e7:82:20:04:14:ff:7d:
ab:f8:0b:0f:8e:c9:da:f3:0e:8f:32:8b:38:4d:26:
8b:7e:7c:ec:b0:e8:26:9a:b5:9c:23:d6:76:6a:90:
29:0f:86:4f:75:91:ca:37:94:bc:cc:c0:58:9d:63:
cb:e5:0a:77:c0:aa:22:a6:5a:da:7b:c2:65:49:8a:
c8:d4:31:2d:a1:fa:41:77:d4:15:47:85:b6:2b:f5:
63:e8:f5:4a:f4:93:c9:fd:8a:fb:d3:e8:7d:c1:db:
42:48:91:0b:e2:89:4f:cf:b3:9b:57:53:e1:20:b8:
62:64:ae:88:80:bb:0c:e0:4d:05:25:ec:b8:80:96:
be:29:a5:20:1c:30:27:66:df:c0:7e:a7:cd:68:61:
0c:07:0e:09:bb:7c:45:a5:17:c5:ae:fb:f2:96:f4:
84:6c:ad:2b:be:41:0b:29:1c:0f:e3:5a:f8:f8:e5:
bf:80:54:18:6a:ce:18:b8:1d:75:8f:0c:60:75:ea:
49:ee:ef:e9:69:5c:43:59:4b:f4:ea:8c:40:f7:1a:
0c:81:cb:82:ef:43:b0:27:0e:a4:5d:3f:fc:67:96:
8b:bc:46:82:aa:35:93:c5:25:86:ac:e7:0b:cc:2e:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:CE:99:AD:EC:38:C3:99:49:BA:62:15:30:0D:C7:63:70:91:A4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/reTOma3sOMOZSbpiFTANx2NwkaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
73:7a:38:29:ec:c2:8c:39:49:5c:1a:bc:86:8f:2d:6e:c8:f4:
46:06:0c:ee:5b:12:6f:97:ab:ae:27:46:c4:7e:30:ac:00:44:
1f:21:fc:73:0e:bb:f6:46:e4:e8:4e:55:70:fa:24:92:da:62:
1a:0e:86:62:ed:83:ae:98:c9:a1:8d:7e:c6:b3:0a:cf:99:71:
4e:c7:2a:66:a0:f3:b2:91:17:ec:43:47:5a:32:e6:8c:e5:2c:
c6:8f:cc:86:8f:cb:e1:f9:a7:49:79:9f:44:46:86:5b:04:06:
4c:39:ea:e5:b9:18:bc:19:37:53:f0:97:3c:d0:ac:2d:86:60:
ad:2f:91:89:e2:e2:a3:b1:2c:a0:6d:09:25:58:fa:1b:17:a6:
6d:87:18:74:99:6a:0c:91:d1:2f:8e:e6:b0:eb:9b:af:b9:00:
5f:a6:7c:bc:5f:a9:98:ee:e9:4e:ab:07:68:df:78:6f:7b:ec:
66:d2:74:ce:af:4a:8a:7a:23:22:be:89:47:78:ee:c8:45:60:
84:ef:87:f5:89:45:72:99:e3:aa:96:4b:1e:a9:5a:90:24:88:
a4:7a:4a:91:03:cb:a4:3b:60:ff:06:29:ae:2a:40:00:89:0c:
c7:fb:e0:62:be:4e:c0:62:ee:6b:63:b3:68:e9:c1:a5:68:87:
3c:23:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org